Impossibile accedere a Wordpress Admin con bilanciatore del carico terminato con SSL

Question

Impossibile accedere a Wordpress Admin con bilanciatore del carico terminato con SSL

- 4
- 2611 2017-04-02
Esecuzione di Wordpress 4.7.3 con unfrontend HAProxy (versione 1.7.2)e Apache 2.4.10 conbackend PHP 5.6.

Anche questo ètuttoin Debian 8.7.

X-Forwarded-Fore X-Forwarded-Proto sonoimpostati correttamente da HAProxy.

Ilproblema che ho riscontrato è quando hoterminato SSL sulfrontend HAProxy (inesecuzionein modalità http)e accedo a Wordpress Admin ottengo l'errore

Spiacenti,non sei autorizzato ad accedere a questapagina.

Hoprovatoi passaggi da qui manon hanno risoltoilproblema.

Infondo almio wp-config.php ho

define('FORCE_SSL_ADMIN', true); // in some setups HTTP_X_FORWARDED_PROTO might contain // a comma-separated list e.g. http,https // so check for https existence if (strpos($_SERVER['HTTP_X_FORWARDED_PROTO'], 'https') !== false) $_SERVER['HTTPS']='on';

Hoprovato un'installazionepulita di Wordpress (stavoimportando un lato client di un Wordpressprecedenteper lepulizie diprimavera,maneanche questo ha risoltoilproblema).
Running Wordpress 4.7.3 with a HAProxy (version 1.7.2) frontend and Apache 2.4.10 with PHP 5.6 backend.

This is all under Debian 8.7 as well.

X-Forwarded-For and X-Forwarded-Proto are set correctly by HAProxy.

The issue I'm having is when I have SSL terminated on the HAProxy frontend (running http mode) and login to Wordpress Admin I get the error

Sorry, you are not allowed to access this page.

I tried the steps from here but they didn't fix the issue.

At the bottom of my wp-config.php I have

define('FORCE_SSL_ADMIN', true); // in some setups HTTP_X_FORWARDED_PROTO might contain // a comma-separated list e.g. http,https // so check for https existence if (strpos($_SERVER['HTTP_X_FORWARDED_PROTO'], 'https') !== false) $_SERVER['HTTPS']='on';

I tried a clean install of Wordpress (was importing a clients side of an earlier Wordpress for spring cleaning, but that didn't fix the issue either).
admin ssl
- fonte
- jtl

1 risposta

voti

jtl · Answer 1 · 2017-04-13

5

2017-04-13

Ho appena scopertoilproblema.

Devi aggiungere leimpostazioni HTTPS/SSLprima di require_once(ABSPATH . 'wp-settings.php');neltuo wp-config.php

Quindi laparte rilevante deltuo wp-config.php dovrebbeessere simile a questa.

 define( 'FORCE_SSL_ADMIN', true );

// in some setups HTTP_X_FORWARDED_PROTO might contain
// a comma-separated list e.g. http,https
// so check for https existence
if( false !== strpos( $_SERVER['HTTP_X_FORWARDED_PROTO'], 'https' ) ) {
    $_SERVER['HTTPS'] = 'on';
}

/** Sets up WordPress vars and included files. */
require_once( ABSPATH . 'wp-settings.php' );

I just figured out the issue.

You need to add the HTTPS/SSL settings before require_once(ABSPATH . 'wp-settings.php'); in your wp-config.php

So the relevant part of your wp-config.php should look like this.

define( 'FORCE_SSL_ADMIN', true );

// in some setups HTTP_X_FORWARDED_PROTO might contain
// a comma-separated list e.g. http,https
// so check for https existence
if( false !== strpos( $_SERVER['HTTP_X_FORWARDED_PROTO'], 'https' ) ) {
    $_SERVER['HTTPS'] = 'on';
}

/** Sets up WordPress vars and included files. */
require_once( ABSPATH . 'wp-settings.php' );

fonte
jtl

Aggiungendoil codice sopra require_once (ABSPATH. 'Wp-settings.php');èmoltoimportante altrimentinonfunzionerà

Adding the the code above the require_once( ABSPATH . 'wp-settings.php' ); is very important or else it will not work
- 1
- 2017-12-05
- error2007s
grazieper la condivisione,questo dovrebbeessere aggiunto alla documentazione ufficiale: https://codex.wordpress.org/Administration_Over_SSL#Using_a_Reverse_Proxy

thanks for sharing, this should be added to the official documentation: https://codex.wordpress.org/Administration_Over_SSL#Using_a_Reverse_Proxy
- 0
- 2017-12-21
- baptx